Skip to content

Commit 4195c46

Browse files
authored
utilize vex for trivy scan (#662)
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
1 parent b9069d5 commit 4195c46

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

Makefile

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,9 @@ test:
4949
# check for vulnerabilities
5050
vulns:
5151
govulncheck $(GO_FILES) > $(GO_VULNCHECKS) 2>&1 || true
52-
trivy fs . > $(TRIVY_RESULTS) 2>&1 || true
52+
curl -fsSL -o rancher.openvex.json https://media.githubusercontent.com/media/rancher/vexhub/refs/heads/main/reports/rancher.openvex.json || true
53+
trivy fs --vex rancher.openvex.json --skip-files rancher.openvex.json . > $(TRIVY_RESULTS) 2>&1 || true
54+
rm rancher.openvex.json || true
5355

5456
# cleanup artifacts
5557
clean:

0 commit comments

Comments
 (0)